This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json) Hash identifier: 0P6oDBjTm6jY8zkC0+Rx16a4/ix9xg+K7CZjKnuXMwo= Subject key identifier: E2:8C:70:74:82:04:98:6C:7F:B4:87:87:52:39:16:87:90:F6:2B:5F Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Certificate serial: 019B19BC410C693F48B928C3BE6CD1E1C508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft Manifest number: 1772 Signing time: Sat 13 Dec 2025 22:02:06 +0000 Manifest this update: Sat 13 Dec 2025 22:02:06 +0000 Manifest next update: Sun 14 Dec 2025 22:02:06 +0000 Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: syBn7+A+cIwABeLNpOri0003+YrvSR8rHWyM9l2xEVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:41:0c:69:3f:48:b9:28:c3:be:6c:d1:e1:c5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb Validity Not Before: Dec 13 22:02:06 2025 GMT Not After : Dec 14 22:02:06 2025 GMT Subject: CN=e28c70748204986c7fb487875239168790f62b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:48:87:db:f4:3d:7d:09:2e:89:c2:ff:8f: 96:2a:d7:b1:bd:72:60:34:ad:dc:7d:c1:e1:ca:07: 07:a1:db:19:ef:03:5d:bc:2a:63:34:53:35:be:a3: 52:29:d3:4e:84:c8:96:90:44:d6:ef:79:8f:c3:3e: f1:01:8b:2f:1e:21:1e:94:cc:4c:bc:d4:31:52:e9: 18:db:85:0b:7b:ca:a0:4d:67:b1:6d:b5:78:d2:f1: c5:cb:2c:b1:b1:14:f2:de:96:3c:4f:d1:a0:77:3e: e2:a6:6f:1d:07:eb:6b:78:c8:99:1a:78:5e:26:4e: 4f:c8:42:df:e4:e3:6e:0d:27:32:0e:bf:4d:75:04: e6:50:6d:09:fc:69:2b:58:b6:dd:6e:db:9e:85:5a: e8:ea:fc:f5:ee:f5:38:e4:e7:e6:d3:80:c8:df:8a: 6f:12:d8:94:c4:0c:d3:45:c1:d1:ea:2c:16:ea:35: f7:bd:6d:10:16:88:aa:07:e3:0c:09:2e:e1:3a:b0: ba:51:99:03:e2:1a:3c:49:28:06:e2:a3:79:6e:35: c3:53:10:89:5d:68:cf:50:34:6d:c4:1a:6e:5b:1e: 74:59:74:69:5b:7e:d1:f3:2f:55:4c:e1:1e:46:82: 01:49:c1:cc:53:40:b0:d0:63:62:dc:21:f2:6c:e2: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8C:70:74:82:04:98:6C:7F:B4:87:87:52:39:16:87:90:F6:2B:5F X509v3 Authority Key Identifier: keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:88:17:f5:6e:80:30:66:44:f6:df:be:e4:29:b3:bd:9e:3b: 49:1f:4b:06:55:23:57:39:52:b4:58:7f:a6:66:c9:85:a8:8d: 5b:88:a9:5c:0a:ca:20:53:4d:ba:13:a2:8d:e4:6b:8a:26:3a: 30:5f:6a:c9:3b:2d:0a:00:11:79:af:35:a3:85:d8:ec:93:79: ba:a9:07:4b:ad:1d:47:c3:15:e7:67:7b:1d:95:82:b0:e7:f0: 17:90:0a:e2:c9:ee:8d:e9:43:1b:72:f2:29:fe:72:b2:5b:64: bd:2c:75:cc:21:88:f1:05:0f:3c:35:2d:06:4b:8f:9f:c1:88: c1:76:c7:61:a4:54:df:01:8e:2a:ea:aa:e0:f6:47:8a:65:1e: c5:fa:ef:b5:25:df:99:cc:62:80:c2:e6:4e:42:b9:99:1c:7f: bb:19:ec:0a:7e:00:65:0a:b4:36:59:cd:ef:d2:34:8b:61:47: 70:34:7d:ad:50:28:5c:2d:aa:eb:2c:b5:af:47:02:67:b6:bb: ec:fd:c3:f4:e6:3d:ec:b8:81:b7:bb:11:80:e5:0d:34:95:21: 31:73:b5:0a:05:b7:c9:fc:d3:b0:23:b1:94:8d:54:ec:01:fe: 39:3a:11:da:ca:58:f9:8c:4b:7c:a4:b1:f8:2f:31:c7:3b:9f: ca:f5:11:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvEEMaT9IuSjDvmzR4cUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj MmYzZmIwHhcNMjUxMjEzMjIwMjA2WhcNMjUxMjE0MjIwMjA2WjAzMTEwLwYDVQQD EyhlMjhjNzA3NDgyMDQ5ODZjN2ZiNDg3ODc1MjM5MTY4NzkwZjYyYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLlIh9v0PX0JLonC/4+WKtexvXJg NK3cfcHhygcHodsZ7wNdvCpjNFM1vqNSKdNOhMiWkETW73mPwz7xAYsvHiEelMxM vNQxUukY24ULe8qgTWexbbV40vHFyyyxsRTy3pY8T9Ggdz7ipm8dB+treMiZGnhe Jk5PyELf5ONuDScyDr9NdQTmUG0J/GkrWLbdbtuehVro6vz17vU45Ofm04DI34pv EtiUxAzTRcHR6iwW6jX3vW0QFoiqB+MMCS7hOrC6UZkD4ho8SSgG4qN5bjXDUxCJ XWjPUDRtxBpuWx50WXRpW37R8y9VTOEeRoIBScHMU0Cw0GNi3CHybOJYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKMcHSCBJhsf7SHh1I5FoeQ9itfMB8GA1UdIwQY MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2 LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYgX9W6A MGZE9t++5CmzvZ47SR9LBlUjVzlStFh/pmbJhaiNW4ipXArKIFNNuhOijeRriiY6 MF9qyTstCgARea81o4XY7JN5uqkHS60dR8MV52d7HZWCsOfwF5AK4snujelDG3Ly Kf5ysltkvSx1zCGI8QUPPDUtBkuPn8GIwXbHYaRU3wGOKuqq4PZHimUexfrvtSXf mcxigMLmTkK5mRx/uxnsCn4AZQq0NlnN79I0i2FHcDR9rVAoXC2q6yy1r0cCZ7a7 7P3D9OY97LiBt7sRgOUNNJUhMXO1CgW3yfzTsCOxlI1U7AH+OToR2spY+YxLfKSx +C8xxzufyvURow== -----END CERTIFICATE-----Generated at Sun Dec 14 01:39:12 2025 by rpki-client